Security Analyst

jci; Milwaukee (WI); Presencial; USD 76.000 - 105.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive salary

Paid vacation/holidays/sick time

Comprehensive benefits including 401K,

medical, dental, vision

On the job/cross training

Collaborative team environment

Zero Harm safety policy

Descripción de la vacante

Johnson Controls is seeking a seasoned security operations and incident response professional to investigate alerts, drive root cause analysis, and coordinate across teams to contain threats.

You will improve detection, build runbooks and SOPs, and integrate threat intelligence into daily workflows while collaborating with Security, IT, and business units to raise overall resilience.

Formación

• Extensive experience in Security Operations and Incident Response.
• Proficiency with modern cybersecurity tools (EDR, SIEM, firewalls, WAF, identity, and cloud security).
• Experience operationalizing threat intelligence and detection strategies.
• Strong analytical and problem-solving skills, with focus on process rigor.
• Ability to drive action in fast-paced, cross-functional environments.
• Excellent communication and collaboration skills, team-oriented and mentoring abilities.
• Inquisitive mindset with research approach.

Responsabilidades

• Investigate and respond to security alerts and incidents, performing root cause analysis and corrective actions.
• Lead and support incident response efforts across teams to contain and remediate threats.
• Continuously improve detection and response through automation, runbooks, and SOPs.
• Identify and strengthen threat detection and prevention capabilities.
• Integrate threat intelligence into workflows to address emerging threats.
• Collaborate with Security, IT, and Business teams to enhance readiness and resilience.

Conocimientos

Security Operations

Incident Response

Cybersecurity tools

Threat intelligence

Analytical skills

Cross-functional influence

Communication

Curiosity

Herramientas

EDR

SIEM

Firewalls

WAF

Identity security

Cloud security platforms

Descripción del empleo

What we offer:

• Competitive salary


• Paidvacation/holidays/sicktime


• Comprehensive benefits package including 401K, medical, dental, and vision care


• On the job/cross training opportunities


• Encouraging and collaborative team environment


• Dedication to safety through our Zero Harm policy

What you will do:

• Investigate and respond to security alerts and incidents, performing root cause analysis and driving corrective actions.


• Lead and support incident response efforts, coordinating across teams to contain and remediate threats.


• Continuously improve detection and response processes through automation, runbook development, and SOP creation.


• Identify and strengthen threat detection and prevention capabilities.


• Integrate threat intelligence into operational workflows to proactively address emerging threats.


• Collaborate with Security, IT, and Business teams to enhance readiness and resilience through joint response planning.

What You’ll Need to Succeed

• Extensive experience in Security Operations and Incident Response, with a strong track record of handling complex incidents.


• Proficiency with modern cybersecurity tools (EDR, SIEM, firewalls, WAF, identity, and cloud security platforms).


• Experience operationalizing threat intelligence and developing detection strategies for evolving threats.


• Strong analytical and problem-solving skills, with a focus on process rigor and continuous improvement.


• Ability to drive action and influence outcomes in fast-paced, cross-functional environments.


• Excellent communication and collaboration skills, with a team-first mindset and mentoring capabilities.

What we look for:

Required

• 1-5 years in a SOC, incident response, IT security operations, or adjacent role (e.g., EDR admin, blue team intern/co-op).


• Experience with at least one of: SIEM, EDR/XDR, secure email gateway, cloud security tools (M365 Defender suite, Defender for Endpoint, Sentinel, Splunk, CrowdStrike, Palo Alto, Zscaler, etc.).


• Familiarity with core investigation concepts: event correlation, user/host baselining, MITRE ATT&CK, common malware/TTPs, phishing indicators.


• Strong communication skills—able to explain technical issues to non-technical users and document clearly and concisely.


• Understanding of basic networking (TCP/IP, DNS, HTTP, VPN) and Windows/Linux fundamentals (processes, services, logs, registry, authentication).


• Ability to work in a ticket-driven environment with SLAs and handoffs to an MSSP.


• Inquisitive personality that lends itself to question asking and research

Preferred

• Exposure to manufacturing/OT environments (ICS/SCADA basics, Purdue model, segmentation concepts, remote access risks).


• Experience enriching investigations with OSINT Tools (VirusTotal, Shodan, Censys, CyberChef etc.)


• Experience with SOAR workflows and playbooks; basic scripting (PowerShell, Python, KQL) for triage automation.


• Knowledge of identity security (AAD, MFA, conditional access), email security, and cloud log sources.


• Certifications: Security+, CySA+, Microsoft SC‑200, GSEC, or equivalent.

HIRING SALARY RANGE: $76,000-105,000 USD (Salary to be determined by the education, experience,knowledge, skills, and abilities of the applicant, internal equity, and alignment with marketdata.) All hiring decisions are ultimately made by human reviewers. For details, pleasevisit the About Us tab on the Johnson Controls Careers site athttps://jobs.johnsoncontrols.com/about-us

Johnson Controls International plc. is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, genetic information, sexual orientation, gender identity, status as a qualified individual with a disability or any other characteristic protected by law. To view more information about your equal opportunity and non-discrimination rights as a candidate, visit EEO is the Law. If you are an individual with a disability and you require an accommodation during the application process, please visit here.